Study plan
How to Pass the ISC2 Certified in Cybersecurity Exam
A study plan for the ISC2 Certified in Cybersecurity certification exam, built from the official domain weights instead of a generic template. Focus on understanding the terminology and the 'why' behind security controls. Use flashcards for the CIA triad and AAA frameworks, and practice mapping specific security controls to their respective domains (Physical vs. Logical).
- 5 domains
- 120 questions
- 120 min
- 70% to pass
certilumStudy in weight order, not topic order
The plan below follows the official blueprint weights, so the order of study is the order that returns the most points.
- 1
Security Principles
25%- Confidentiality, Integrity, Availability (CIA)
- Authentication, Authorization, and Accounting (AAA)
- Security Controls (Physical, Technical, Administrative)
- Risk Management Basics
- +1 more topics in the blueprint
30 practice questions tagged to this domain.
- 2
Network Security
21%- OSI Model
- TCP/IP Protocols
- Network Attacks (DoS, MitM, Spoofing)
- Firewalls and IDS/IPS
- +1 more topics in the blueprint
25 practice questions tagged to this domain.
- 3
Access Control Concepts
20%- Identity and Access Management (IAM)
- Principle of Least Privilege
- Multi-Factor Authentication (MFA)
- Physical vs. Logical Access
- +1 more topics in the blueprint
24 practice questions tagged to this domain.
- 4
Security Operations
17%- Security Monitoring
- Log Management
- Data Security and Encryption
- Cloud Security Fundamentals
- +1 more topics in the blueprint
20 practice questions tagged to this domain.
- 5
Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR)
17%- Incident Response Lifecycle
- Business Impact Analysis (BIA)
- Disaster Recovery Planning
- Business Continuity Planning
- +1 more topics in the blueprint
21 practice questions tagged to this domain.
Three phases, in order
Most failures are process failures, not knowledge failures.
Phase 1 — Learn the high-weight domains
Start where the points are. The first domains on this plan carry the most weight, so a gap there costs the most. Cover the objectives, then close each topic with practice questions you actually get wrong.
Phase 2 — Close the mid-weight domains
The middle of the blueprint is where most candidates plateau. These domains are worth less per topic than the first phase, but they add up fast, and they are the usual difference between a near miss and a clear pass.
Phase 3 — Timed full mocks
Stop reading new material at this point. Run full-length exams under the real time limit and the real format, and use the per-domain breakdown to find which domain is still costing you the pass.
Where we put the emphasis
Conceptual mastery of the cybersecurity lifecycle and terminology alignment with ISC2 standards.
The order matters less than the loop. Every domain you finish should end with questions you got wrong, because the mistake is the only thing you actually needed to study. On the ISC2 Certified in Cybersecurity that loop is worth 21% of the exam in the first block alone.
More about the ISC2 Certified in Cybersecurity exam
Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.
Related certifications
Explore other certifications in the same category and see how they stack up.
Frequently asked questions
Everything you need to know about the ISC2 Certified in Cybersecurity exam.